The role of the SHC Direct Information Security group is to ensure that all client data is secure from any internal or external security threats. Whether the data is PCI or PII, it is safely encrypted and locked up in multi-tiered secure systems and infrastructure. The Security Group continually monitors the integrity and security of the SHC Direct infrastructure, programs and processes which touch such data. SHC Direct's policy is to adopt best-in-class information security technologies and processes in order to insure maximum security for its clients' data and to evolve and strengthen these on a continued basis as new security technologies become available.

SHC Direct's commitment to data security has led to the evolution of the current secure infrastructure. In recognition of this effort, SHC Direct was awarded PCI Level 1 Certification in 2007. The SHC Direct networks and systems are periodically scanned for vulnerabilities by an external security firm and its compliance with PCI is annually audited by third parties.

PCI compliance reflects SHC Direct's integral belief in protecting sensitive information assets and corporate intelligence and a focus on business for the long term. PCI, also known as CISP (Cardholder Information Security Program) establishes a set of 12 industry-wide requirements designed to protect sensitive information from being compromised. These requirements, which also include numerous sub-requirements, are directed at all businesses that store, process, or transmit cardholder information. The certification demonstrates SHC Direct's commitment to protecting the confidentiality and integrity of cardholder data and personal data.

"The PCI Data Security Standard is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures, which has been established by the Payment Card Industry Security Standards Council..." (from www.pcisecuritystandards.org)

Additional information about the PCI Security Standards Council and the PCI DSS are available at www.pcisecuritystandards.org. ("PCI Security Standards Council Home", (2007), PCI Security Standards Council), (Accessed: 2007, August 28).